Anti-"omgwtfbbqigotHAX0REZD" measures?

1 pages Page 1
R
Rawling
Academy Page
#1
Just browsing through Gaile's "Hacked Mesmer Ples" thread on the dev forum, I came across this, which I'd never really thought of:

"A trade that reveals your user name, a friendly chat that reveals your secret question, and the account is gone."

So why not program in a simple (!) chat filter that notices when you are typing:
  1. Your account name (i.e. e-mail)
  2. Your password (d'uh)
  3. Your secret answer (I forgot we even HAD one, and I've only been playing two months)
and both cancels the type and puts up its own chat line (like the one for overspamming). Then if you really want to communicate this information you can bypass it by putting a space in or whatever (like the one for overspamming).

Good idea? Any suggestions?

/signed
Z
Zui
Desert Nomad
#2
/not signed

People could just use their brain, stop being so damned stupid, and actualy be responsible for their own security...
R
Rawling
Academy Page
#3
Well, yeah. But this would give ANet something to use when someone complains that they told someone their logon and now their password has changed.

Or even better, the system could LOG if someone tries to give their details away and later when someone complains "keyloggers" got their account hacked, ANet can go "...or, you were a dumbass like this *screenshot* and gave it away"
lord_shar
lord_shar
Furnace Stoker
#4
EDIT: Just examined the suggestion a 2nd time. Yes, it can be done and has been done before (I think it was EQ or D2 that implemented something similar a while back).
R
Rawling
Academy Page
#5
When you log on it could just send you those three bits of information to store in memory for the duration of your session (that said you have already provided your username and password, they wouldn't even need to be re-transmitted). No need to store them anywhere permanent.

Having it all done centrally WOULD just be silly

EDIT: wait.... why would ALL this data need to be sent to ALL accounts? It just needs to check one user's outgoing chat for their own three bits of info. Even suggesting that everyone;s account data be sent to every user... wow. In my brief time here have I really come accross as that dumb? ^^ sorry
lord_shar
lord_shar
Furnace Stoker
#6
Quote:
Originally Posted by Rawling
When you log on it could just send you those three bits of information to store in memory for the duration of your session (that said you have already provided your username and password, they wouldn't even need to be re-transmitted). No need to store them anywhere permanent.

Having it all done centrally WOULD just be silly

EDIT: wait.... why would ALL this data need to be sent to ALL accounts? It just needs to check one user's outgoing chat for their own three bits of info. Even suggesting that everyone;s account data be sent to every user... wow. In my brief time here have I really come accross as that dumb? ^^ sorry
Sorry, was gonna edit the last post. I did see this feature enabled in EQ or D2 a while back. So yes, the GW client would only have to filter for the current user's private information.
KoalaMeatPie
KoalaMeatPie
Wilds Pathfinder
#7
/signed

I can see it now even before this is implemented, i'm not saying you should try, but go to Ascalon and type in :

"Wow! A-Net censors our passwords! : ******** "

And see how much jibber-jabber comes out.
Aki Soyokaze
Aki Soyokaze
Lion's Arch Merchant
#8
/signed

Increased measures to help people would help both the gamers and the support side. It would mean fewer accounts being hacked and less work for those that provide the support that has to go towards complaints of people being hacked. It's a good idea even if the best solution is to remind yourself not to give out your login and pw, plus I don't see how it could really hurt.